Skip to content

PARTNERSHIPS

Partner with us and build on our data.

Consultancies, brokers, insurers and security providers already support their clients with our data.
Integrate verified severity and loss evidence into your own platforms, reports and services, and make them even stronger.

Who partners with us

Different organisations use our data for different jobs. These are the four we see most.

Consultancies and Advisors

Benchmark your clients against their industry and country, and integrate board reports and risk assessments with our extensive dataset of observed incidents and severity indicators.

Brokers and Insurers

Quantify typical loss and severity by sector, country and threat to support underwriting, pricing conversations and risk-transfer decisions. Based on tens of thousands of recent datapoints, covering 190 countries.

Security providers and MSSPs

Add attack context, ESIX© scores and severity trend indicators to your product or monitoring service, so your customers can see what is hitting organisations like them, how severe it is, and how it is evolving.

Associations, non-profits and Academia

We're happy to support you!
Give your members, students or researchers trusted attack data and trend reports. Different discounts are agreed case by case.

From first conversation to live data

01

Tell us your use case

Tell us what you want to build or deliver, and for whom.

02

Agree the scope

We agree the data coverage, the access method and the licence terms.

03

Start using the data

Your API key is issued and the contract signed with 24 hours from subscription: two working days for setup and testing.

Why partners choose Hackmanac data

Observed, not estimated

Every record is a real incident we have verified: 65,000+ incidents across 4,800 threat actors, 19 industries and 190 countries, as of today.

A methodology you can audit

ESIX© and our other metrics are documented in full, so you can review them internally and explain them to your own clients.

Comparable across clients, globally

One severity scale for every threat actor, threat, sector and country, so benchmarks stay consistent from one engagement to the next.

Useful for compliance

Supports risk and resilience work under DORA, NIS2 and SEC disclosure rules.

Read the full methodology

The licence in plain words

Internal use

Using the data inside your own organisation, for your own decisions and reporting. The standard HackRisk and HackLoss plans cover it.

Commercial use

Using the data in a product, a report or a service you provide to others, or redistributing or embedding it. This needs a commercial licence.

A commercial licence is subject to our Terms and Conditions and to a specific EULA, which sets out the exclusions.

Questions we hear most

Do I need a partnership for internal use only?

No. The standard HackRisk and HackLoss plans cover internal use.

Can I embed or redistribute the data?

Yes, under a commercial licence. The scope depends on how you use it.

Can I white-label it?

Yes, through a custom plan. Tell us about your use case.

Do non-profits and universities get a discount?

Discounts for non-profits and academia are agreed case by case. Tell us about your organisation and its goals.

Can I see the full methodology?

Yes. Our public methodology page explains how ESIX© and our other metrics work. Detailed technical documents, covering how ESIX© is calculated and how the Threat Impact Simulator© makes its inferences, are shared with partners under NDA.

How long does it take to get started?

Your API key is issued and the contract signed within 24 hours of subscription: two working days for setup and testing.

Let's talk about your use case

Tell us what you want to build and we will come back with the right option.